Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa
File: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (raw, json)
Hash identifier: 0KVRtW4cjJNlf4vMbp54VDzASjSrsJ2PUBkvL+sYQBk=
Subject key identifier: CD:5F:1B:A3:D8:9C:82:CA:C4:40:22:EB:44:D4:79:94:A0:BE:1C:4B
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 5D0A62E91994D8D531A510CDC01F0886C97E72A4
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa
Signing time: Tue 20 Oct 2026 19:49:37 +0000
ROA not before: Tue 20 Oct 2026 19:44:37 +0000
ROA not after: Tue 19 Oct 2027 19:49:37 +0000
asID: 142146
IP address blocks: 194.247.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 04:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0a:62:e9:19:94:d8:d5:31:a5:10:cd:c0:1f:08:86:c9:7e:72:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Oct 20 19:44:37 2026 GMT
Not After : Oct 19 19:49:37 2027 GMT
Subject: CN=CD5F1BA3D89C82CAC44022EB44D47994A0BE1C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:3d:8f:94:78:2c:37:32:30:5e:31:14:88:
71:3b:76:1b:4b:a2:37:51:0e:55:eb:19:dc:da:38:
a3:28:92:cb:27:0f:6a:9a:ea:ed:1a:89:f0:9b:c5:
66:78:9b:26:26:63:be:2b:0e:2e:76:0c:51:78:a5:
99:ea:30:7c:fd:fd:d3:ba:f4:b1:b8:2e:c5:07:18:
72:b2:81:c1:d8:7d:a5:c9:53:1a:4b:6b:1b:1e:98:
43:01:61:c9:4c:f0:39:8d:8d:5c:9c:21:76:bd:92:
0e:7a:33:2e:5a:f2:a8:5e:b9:c4:4d:18:77:07:df:
29:3e:42:9d:2d:3b:bb:cf:8a:b3:22:8b:86:5f:c7:
da:11:00:59:b8:28:19:2f:ab:21:aa:d4:3e:49:1b:
23:5f:81:dd:3a:0f:4f:03:88:81:43:7e:b6:17:d1:
3a:67:a1:58:b4:44:fa:4a:78:8a:95:3f:70:18:80:
0b:82:48:64:44:bf:e2:49:7a:8e:d2:12:7b:44:3f:
ba:6d:80:89:73:99:f4:c9:27:b6:4f:30:e2:a7:68:
76:1a:01:6c:78:46:3c:cb:0d:4f:31:41:20:c7:e2:
11:5b:e5:c4:ae:b0:59:fb:d3:89:6e:97:b7:bf:28:
7d:92:75:fb:d8:b1:c1:25:04:f8:db:8e:0a:57:22:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5F:1B:A3:D8:9C:82:CA:C4:40:22:EB:44:D4:79:94:A0:BE:1C:4B
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.44.0/24
Signature Algorithm: sha256WithRSAEncryption
37:84:80:e0:5d:c8:d8:f9:8f:9b:41:9d:70:ca:18:90:53:f9:
3e:73:4f:7f:e2:f1:47:6d:bb:fe:e8:b6:c2:e3:43:ad:d8:ec:
d4:6e:1b:2f:b0:c9:09:df:14:35:9d:a3:c4:3b:aa:7b:3a:01:
d2:2f:6a:bd:3e:e6:cb:45:ec:37:21:22:12:c0:9e:1b:6b:10:
6f:9b:41:59:c1:25:76:77:5d:01:3f:26:1b:d5:0e:71:68:a0:
8e:97:0b:73:4d:83:79:53:2f:2e:ae:ca:71:b8:66:06:a6:40:
5f:3f:d7:71:0d:86:7b:f0:b9:d8:24:bd:88:0e:d0:5a:d5:e3:
ac:50:49:25:7d:23:b8:0e:ad:41:14:51:42:69:07:07:f8:8e:
55:6c:1b:ce:a6:2a:5a:0b:c8:0a:56:09:0b:ea:a1:04:bb:2c:
ab:3f:5f:da:88:85:a3:24:bf:be:ec:4e:57:a5:da:16:04:e9:
1e:32:45:35:64:0c:f3:c5:57:07:27:e1:93:30:d8:85:4b:4c:
5a:89:79:56:d9:1c:ed:72:43:4a:ee:b9:f1:3e:96:a8:a9:f5:
fa:b3:4c:2c:26:51:1a:51:47:ed:ef:31:6e:c6:84:66:93:e2:
fb:74:e3:14:66:f2:3f:aa:79:7d:67:2b:b1:f3:26:f7:f1:0d:
aa:df:29:7d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXQpi6RmU2NUxpRDNwB8Ihsl+cqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm
ZjZkNjQ1YjAeFw0yNjEwMjAxOTQ0MzdaFw0yNzEwMTkxOTQ5MzdaMDMxMTAvBgNV
BAMTKENENUYxQkEzRDg5QzgyQ0FDNDQwMjJFQjQ0RDQ3OTk0QTBCRTFDNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fD2PlHgsNzIwXjEUiHE7dhtL
ojdRDlXrGdzaOKMokssnD2qa6u0aifCbxWZ4myYmY74rDi52DFF4pZnqMHz9/dO6
9LG4LsUHGHKygcHYfaXJUxpLaxsemEMBYclM8DmNjVycIXa9kg56My5a8qheucRN
GHcH3yk+Qp0tO7vPirMii4Zfx9oRAFm4KBkvqyGq1D5JGyNfgd06D08DiIFDfrYX
0TpnoVi0RPpKeIqVP3AYgAuCSGREv+JJeo7SEntEP7ptgIlzmfTJJ7ZPMOKnaHYa
AWx4RjzLDU8xQSDH4hFb5cSusFn704lul7e/KH2SdfvYscElBPjbjgpXIqsRAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUzV8bo9icgsrEQCLrRNR5lKC+HEswHwYDVR0j
BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz
NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5
dFpGcy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt
MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzMjM0MzcyZTM0
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMTM0MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADC9ywwDQYJKoZIhvcNAQELBQADggEBADeEgOBdyNj5j5tBnXDKGJBT+T5zT3/i
8Udtu/7otsLjQ63Y7NRuGy+wyQnfFDWdo8Q7qns6AdIvar0+5stF7DchIhLAnhtr
EG+bQVnBJXZ3XQE/JhvVDnFooI6XC3NNg3lTLy6uynG4ZgamQF8/13ENhnvwudgk
vYgO0FrV46xQSSV9I7gOrUEUUUJpBwf4jlVsG86mKloLyApWCQvqoQS7LKs/X9qI
haMkv77sTlel2hYE6R4yRTVkDPPFVwcn4ZMw2IVLTFqJeVbZHO1yQ0ruufE+lqip
9fqzTCwmURpRR+3vMW7GhGaT4vt04xRm8j+qeX1nK7HzJvfxDarfKX0=
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:56:25 2026 by rpki-client